CVE-2011-2719
CVE-2011-2719
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain swekey.auth.lib.php local variables via a crafted query string, a related issue to CVE-2011-2505.
EPSS 2,4% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
phpmyadmin Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 4:3.4.3.2-1
Actualiza a 4:3.4.3.2-1
phpmyadmin Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 4:3.4.3.2-1
Actualiza a 4:3.4.3.2-1
phpmyadmin Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 4:3.4.3.2-1
Actualiza a 4:3.4.3.2-1
Fuentes originales
- http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=e7bb42c002885c2aca7aba4d431b8c63ae4de9b7
- http://www.securityfocus.com/archive/1/518967/100/0/threaded
- http://seclists.org/fulldisclosure/2011/Jul/300
- http://www.securityfocus.com/archive/1/519155/100/0/threaded
- http://secunia.com/advisories/45515
- https://bugzilla.redhat.com/show_bug.cgi?id=725384
- http://secunia.com/advisories/45365
- http://www.securityfocus.com/bid/48874
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:124
- http://www.openwall.com/lists/oss-security/2011/07/26/10
- http://osvdb.org/74112
- http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=571cdc6ff4bf375871b594f4e06f8ad3159d1754
- http://www.phpmyadmin.net/home_page/security/PMASA-2011-12.php
- http://www.debian.org/security/2011/dsa-2286
- http://securityreason.com/securityalert/8322
- http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html
- http://secunia.com/advisories/45315
- http://www.openwall.com/lists/oss-security/2011/07/25/4
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68769
- http://www.xxor.se/advisories/phpMyAdmin_3.x_Conditional_Session_Manipulation.txt
- https://nvd.nist.gov/vuln/detail/CVE-2011-2719